Devolutions.CIEM

0.3.28

Checks/Aws/Test-Ec2InstanceSecretsUserData.ps1

                                function Test-Ec2InstanceSecretsUserData {

    <#

    .SYNOPSIS

        EC2 instance user data contains no secrets

    .DESCRIPTION

        **EC2 instance User Data** is inspected for **secret-like values** (credentials, tokens, keys). Both plain and compressed content are parsed, honoring configured exclusions, to identify patterns that resemble sensitive material within initialization scripts.

    .PARAMETER Check

        CIEMCheck object containing check metadata.

    #>

    [CmdletBinding()]

    [OutputType([PSCustomObject[]])]

    param(

        [Parameter(Mandatory)]

        [CIEMCheck]$Check

    )

    $ErrorActionPreference = 'Stop'

    # TODO: Implement check logic based on Prowler check: ec2_instance_secrets_user_data

    [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check ec2_instance_secrets_user_data for reference.', 'N/A', 'ec2 Resources')

}